This simulator demonstrates how a ring signature is assembled from one real private key and several decoy public keys, and how the resulting proof verifies against the whole group without exposing the true signer.
Pick a ring size and a position for the real signer, then step through the construction to watch the closed loop of equations form and see how verification succeeds without revealing the signer's identity.
Adjust the ring size and real-signer position, then step through signing and verification to see how the closed ring of equations conceals the true signer.
Monero transactions typically mix each real spent output with over a dozen decoys pulled from the blockchain's history, meaning an outside observer faces well over a dozen equally valid candidates for every single spend.
This simulator demonstrates how a ring signature is assembled from one real private key and several decoy public keys, and how the resulting proof verifies against the whole group without exposing the true signer.
This simulator demonstrates how a ring signature is assembled from one real private key and several decoy public keys, and how the resulting proof verifies against the whole group without exposing the true signer.
Pick a ring size and a position for the real signer, then step through the construction to watch the closed loop of equations form and see how verification succeeds without revealing the signer's identity.
Monero transactions typically mix each real spent output with over a dozen decoys pulled from the blockchain's history, meaning an outside observer faces well over a dozen equally valid candidates for every single spend.